Tenable Vulnerability Management

We use it to comply with essential 8 frameworks. We use it for vulnerability management across multiple clients. We also make use of the MSSP portal. Tenable allows us to reduce our attack surface level and helps to prioritize which vulnerabilities need to be actioned first.

• it is expensive
• its a requirement for essential 8
• easy to use once you understand it

DNSFilter, ThreatLocker, usecure uLearn, IT Glue, LastPass for Business

We're using Tenable.io across all IT controlled infrastructure assets to find and patch vulnerabilities. It allows us to find outdated, unsupported and unpatched software no matter the OS or its location(cloud or on-premises.) Once found, it also generally has very easy to follow instructions on remediating the vulnerabilities found.

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Qualys Cloud Platform (formerly Qualysguard) and Rapid7 Nexpose

Elasticsearch, AlienVault USM, KnowBe4, KnowBe4 KCM GRC Platform

My organization uses Tenable.io to regularly scan our network for potential vulnerabilities. This helps identify areas where our network might be vulnerable to attack, such as outdated software or misconfigured devices. Once identified, we can use Tenable.io remediation features to fix the vulnerabilities and reduce the risk of a security breach. We also use Tenable.io continuous network monitoring capabilities to monitor the network in real-time for suspicious activity. This helps identify and respond to potential threats as they emerge, allowing us to take action to prevent a security incident.

• Continuous network monitoring
• Scan scheduling

• Allows us to keep all devices up-to-date and avoid major vulnerabilities
• Quick threat detection and incident response increases device uptime

Splunk Enterprise Security (ES), Red Hat Ansible Automation Platform, Nessus

• Negated the need for regular manual scanning
• Covers reporting requirements to send to managers and for monthly reporting

Qualys Web Application Scanning (WAS) and Acunetix

AlienVault USM, Trend Micro Deep Security for the Hybrid Cloud, CloudCheckr

We use Tenable to scan our public facing web and VPN infrastructure and e-commerce applications for software and configuration security vulnerabilities. While this is required for PCI compliance, we also have business partners and our Cyber Insurance provider who expect us to maintain a vulnerability management program.

• We need to maintain PCI compliance so we need a vulnerability scanner, from time to time I look at other options but keep coming back to Tenable.
• Other than PCI compliance or other compliance requirements, any company which has a public facing internet infrastructure should be doing vulnerability scans on a regular basis so you can expose security issues before someone exploits them and you end up with a data breach!
• Doing regular vulnerability scans gives us the ability to just pull the latest report summary at any given time and provide it to executive leadership or business partners looking for information about our IT security posture.

• Since this is a requirement for our PCI compliance and the cost is relatively low, the ROI isn't really something we need to think too much about, Tenable's pricing is fair and affordable.

Qualys Cloud Platform (formerly Qualysguard)

KnowBe4 PhishER, Sophos Intercept X, The Okta Identity Cloud